Remove “This incident will be reported.” from user warnings

#1

Post by sohkamyung » Sat, Apr 29, 2023, 12:25 PM UTC

Remove “This incident will be reported.” from user warnings
github.com

Re: Remove “This incident will be reported.” from user warnings

#2

Post by Mordisquitos » Sat, Apr 29, 2023, 4:33 PM UTC

    sohkamyung is not in the sudoers file.  This incident will be reported.

Re: Remove “This incident will be reported.” from user warnings

#3

Post by gopalv » Sat, Apr 29, 2023, 4:35 PM UTC

https://xkcd.com/838/

Well, if you have an incident list and nobody's checking it twice ...

Re: Remove “This incident will be reported.” from user warnings

#4

Post by seanhunter » Sat, Apr 29, 2023, 4:39 PM UTC

Thank goodness. That was a terrible message. I remember my very first experience with unix was setting up Red Hat 3.0.3[1] at work for a small internet company in like 1997 and getting that message and just not knowing what on earth to do. There was noone in my company who could help me and all I had was a unix book from my local library which didn't even cover linux (but I sort of thought it would be helpful).

[1] With the legendary 1.2.13 kernel

Re: Remove “This incident will be reported.” from user warnings

#5

Post by raverbashing » Sat, Apr 29, 2023, 4:41 PM UTC

Yeah I think nobody checked any reports since a good 25 years now.

Re: Remove “This incident will be reported.” from user warnings

#6

Post by nixcraft » Sat, Apr 29, 2023, 4:41 PM UTC

Boy, I made so many memes around sudo. I can't believe they removed it. I mean, sudo does log messages in /var/log/secure or /var/log/auth.log on Linux when something fails or is executed successfully, depending on security policies. The default on most distro is to log messages.

Re: Remove “This incident will be reported.” from user warnings

#7

Post by jamal-kumar » Sat, Apr 29, 2023, 4:45 PM UTC

For those wondering where the reports go, under systemd-based linux distributions ideally you can get them with this:

    sudo journalctl /bin/sudo

Historically speaking however the sysadmin with access to the 'mail' command would be able to run that and see mail delivered to root@localhost for these reports. I think at least OpenBSD still does things this way [1], but they moved away from sudo YEARS ago now [2]

[1] https://man.openbsd.org/security.8

[2] https://man.openbsd.org/doas

Re: Remove “This incident will be reported.” from user warnings

#8

Post by trollingagain » Sat, Apr 29, 2023, 4:47 PM UTC

The infringement has been backtraced and you will be reported to the cyberpolice

Re: Remove “This incident will be reported.” from user warnings

#9

Post by f1shy » Sat, Apr 29, 2023, 4:47 PM UTC

Mordisquitos wrote: post #2

sohkamyung is not in the sudoers file. This incident will be reported.

Sogtulakk?

Re: Remove “This incident will be reported.” from user warnings

#10

Post by johnisgood » Sat, Apr 29, 2023, 4:50 PM UTC

seanhunter wrote: post #4

Thank goodness. That was a terrible message. I remember my very first experience with unix was setting up Red Hat 3.0.3[1] at work for a small internet company in like 1997 and getting that message and just not knowing what on earth to do. There was noone in my company who could help me and all I had was a unix book from my local library which didn't even cover linux (but I sort of thought it would be helpful). [1] W…

"This incident will be logged" may have been better.